OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
(no subject)

From: Andreas Winkelmann (mlawinkelmann.de)
Date: Sat Oct 15 2005 - 15:22:03 CDT


Am Friday 14 October 2005 16:13 schrieb Razvan Mihail:

> I have a mail server postfix with saslauth+bitdefender which works good
> enough,
> but I have a problem with domain sender authentication when content_filter
> = 127.0.0.1:10024 is
> active because all mail traffic are filtered about antivirus ( bitdefender)
> between the ports 10024 and 10025.
> When content_filter = 127.0.0.1:10024 is inactive, authentication works
> great.
>
> Where is the problem?
>
> main.cf usage :

Show "postconf -n" instead.

> mynetworks = 127.0.0.0/8
> defer_transports =
> disable_dns_lookups = no
> relayhost =
> mailbox_command =
> mailbox_transport =
> local_recipient_maps = unix:passwd.byname $alias_maps
> smtpd_sasl_auth_enable = yes
> smtpd_sender_restrictions = hash:/etc/postfix/access
> smtpd_recipient_restrictions = check_sender_access
> hash:/etc/postfix/auth_s,permit_sasl_authenticated,reject_unauth_destinatio
>n smtpd_sasl_authenticated_header = yes
> smtpd_client_restrictions =
> permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination,rejec
>t _rbl_client sbl.spamhaus.org
> strict_rfc81_envelopes = no
> smtpd_sasl_security_option = noanonymous
> smtpd_sasl_local_domain = $myhostname
> broken_sasl_auth_clients = yes
> smtpd_sasl_application_name = smtpd
> smtpd_helo_required = no
> smtpd_helo_restrictions =
> smtpd_use_tls = no
> smtp_sasl_auth_enable = yes
> smtp_sasl_security_option = noanonymous
> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
> smtp_use_tls = no
> #Added by BitDefender, do not remove!
> content_filter = smtp:127.0.0.1:10025

Above you are talking about an Content-Filter on Port 10024 (Which is the
typical Port) Here it is 10025?

And put the IP in Brackets "smtp:[127.0.0.1]:port"

> #End of added lines
>
> and maillog look like this:
>
> Oct 12 17:51:48 domain postfix/smtp[11111]: 5030G44C23: to=,
> relay=127.0.0.1[127.0.0.1],
> delay=0, status=bounced (host 127.0.0.1[127.0.0.1] said: 554 :
> Sender address rejected: Access denied (in reply to RCPT TO command))

Looks for me that Postfix tries to connect to Postfix and Fails in some
Sender-Checks. Check the Port on which Amavis is running.

--
        Andreas